Lucene search

K
osvGoogleOSV:CVE-2019-16915
HistorySep 26, 2019 - 6:15 p.m.

CVE-2019-16915

2019-09-2618:15:10
Google
osv.dev
4

6.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.5%

An issue was discovered in pfSense through 2.4.4-p3. widgets/widgets/picture.widget.php uses the widgetkey parameter directly without sanitization (e.g., a basename call) for a pathname to file_get_contents or file_put_contents.

6.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.5%

Related for OSV:CVE-2019-16915